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<!-- derived --> ^- 12 io 1220 



/ 



1200 



1250 4 



/ 



<configuration> 
1230 i <sett ^ n S sesa-name="rules"> 
~~ ^<rule sesa-name="Foo"> 
1240__1 <Enabled>tru e</Enabled> 1250 1 

1240_2 - <Source> . — 1260_1 

1250_2^ <Ip sesa -name="=">l .0.0.0</IP> 
1 250_3 <Jp ses a-name="=">3.0.0.0</IP> 
1 240_3 </Source> 1 260_2 

~<Action sesa-resolve="usederived"> 
— <ActionType>Den^/ActionType> 1250 6 

</Action> 1260__3 
1240_4 ^<AlertsEnabled value="true" /> _ 1250,5 
1 240_5 — ■ < AlertMessage sesa-resol ve=" accumulat e ,! >Drat ! <l AlertMessagO 
1230,2 </rule> 
1240 6 <ru * e sesa-name= :,, Bar ,l > 

- <When sesa-resolve= f, usederived"> 
1250,7 <Time>Weekdays</Time> 
</When> "^260_4 
1330_3 </rule> 

" <rule sesa-name="Baz"> _ 
1240,7 ~ <So urce> / 1260 - 5 

1250-8 <n > S esa~name="= , '>6.0.0.0</IP> 

1240_8 \ </Source> 

^Destination sesa-resolve— ! usederived n > 

^ <n>>7.0.0H<aE> 126OJ) 

</Destination> 

* <When sesa-resolve="usederived"> 

1250_10 <^ime>Weekdays<aime>__ 

1250_11 <Time>Holidays</Time> 1260,7 

</When> ■ 1260_8 

1 240_1 0^<Action sesa-resolve="usederived"> 

1250,12 <ActionType>Allow</ActionType> 

</Action> \ 
</rule> 1260 - 9 
<7setting> 
</configuration> 
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<!-- base — > 
<configuration> 

<setting sesa-name="rules"> 

l^O'u^ sesa - name= " Foo,,> 1400 

- cEnabled>fake</Enabled> 
1440_2 — <Source> ^^1450 1 J^0_l 
14<50 1 — / 

Msn 1 1 — <D> sesa - name= " = " >2 °0-0 < /IP> 
- ' <IP sesa-name="=">l .0.0.0</IP> 
1440_3 <Source> ' — 1460_2 

I^T"^ 068 *" 13 ** 011 sesa - res< > Iv e="usederived"> 
1450_4 <IP>3.0.0.Q</IP> 

<7Destination>~~""^~- 1460_3 
1440_4 — <When sesa-resolve="usederived"> 

1450_5 <Time>Anytime</Time> 

</When> ^1460_4 
1440_5 <Action sesa-resolve="usederived"> 

1450_6^ <ActionType>Allojv<ActionType> 
1440 6 </Action> 1450_7-ZT — 1460_5 1460 5 

I44U_0 — -<AlertsEnabled value="false" /> 

1 440_7 <AlertMessage sesa-resolve="accumulate">Uh-oh!</AlertMessage 

1430_2 <rule> 

<rule sesa-name="Bar"> 

1440_8^ <Source> 14606 

1450_9 <IP sesa-name="= ff >4.0.0.0</IP> 

</Source> 

1440 9 

- <Destination sesa-resolve="usederived"> 

1450_10- — <IP>5.0.0.0</IP> 

</Destination> " — 1460_7 

1440_10 <Action sesa-resolve- 'usederived M > 

1450_11 - 

</Action> 
<fUle> 1460 - 8 
</setting> 
</configuration> 



<ActionType>Allow</ActionType> 
Vction> ' 
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<!-- merged — > 
<configuration> 
<setting sesa-name- ? rules"> 
<rule sesa-name="Foo"> 
<Enabled>true</Enabled> 1 700 

<Source> 
<IP sesa-name="=">2.0.0.0</rP> 
<IP sesa-name="= ,? >1.0.0.0<IP> 
<IP sesa-name="=">3.0.0.0</IP> 
</Source> 

<Destination sesa-resolve="usederived"> 

<IP>3.0.0.0</IP> 
</Destination> 

<When sesa-resolve="usederived"> 

<Time>Anytime</Time> 
</When> 

<Action sesa-resolve="usederived"> 
<ActionType>Deny</ActionType> 
</Action> 

<AlertsEnabled value="true"x/AlertsEnabled> 
<AlertMessage sesa-resolve="accumulate M >Uh-oh!</AlertMessage> 
<AlertMessage sesa-resolve= fl accumulate">Drat!</AlertMessage> 
</rule> 

<rule sesa-name="Bar"> 
<Source> 

<IP sesa-name= ,, =">4.0.0.0</IP> 
</Source> 

<Destination sesa-resolve="usederived"> 

<IP>5.0.0.0</IP> 
</Destination> 

<Action sesa-resolve="usederived"> 

<ActionType>Allow</ActionType> 
</Action> 

<When sesa-resolve="usederived"> 

<Time>Weekdays</Time> 
</When> 
</rule> 




Fig. 17A 
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<rule sesa-name="Baz"> 
<Source> 

<IP sesa-name="=">6.0.0.0</IP> 
</Source> 

<Destination sesa-resolve="usederived"> 

<IP>7.0.0.0</IP> 
</Destination> 

<When sesa-resolve- 'usederived"> 
<Time>Weekdays</Time> 
<Time>Holidays</Time> 

</When> 

<Action sesa-resolve="usederived"> 

<ActionType>Allow</ActionType> 
</Action> 
</rule> 
</setting> 
</configuration> 
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